Skip to content

fix: Upgrade devalue to fix security vulnerability - #1715

Closed
TheNaoX wants to merge 1 commit into
TanStack:mainfrom
TheNaoX:fix/upgrade-devalue-security-vulnerability
Closed

TheNaoX wants to merge 1 commit into
TanStack:mainfrom
TheNaoX:fix/upgrade-devalue-security-vulnerability

Conversation

@TheNaoX

@TheNaoX TheNaoX commented Aug 27, 2025

Copy link
Copy Markdown
Contributor

From this vulnerability report: GHSA-vj54-72f3-p5jv

Upgraded the devalue dependency to its latest version ^5.3.2 to include the fix in this version of Tanstack Form

@TheNaoX
TheNaoX force-pushed the fix/upgrade-devalue-security-vulnerability branch from 03b4ea8 to 154c131 Compare August 27, 2025 19:48
@jalalazimi

Copy link
Copy Markdown

Is there any update on this PR? The Snyk test flags this issue as a critical vulnerability

https://security.snyk.io/vuln/SNYK-JS-DEVALUE-12205530

@crutchcorn

Copy link
Copy Markdown
Contributor

Closing in favor of:

#1716

FWIW, you should not be impacted in any way unless you are using TanStack Start's Form adapter.

@crutchcorn crutchcorn closed this Aug 28, 2025
@TheNaoX

TheNaoX commented Aug 28, 2025

Copy link
Copy Markdown
Contributor Author

Thank you @crutchcorn

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants